Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
File:                     E_OtQPlu1efznY2eGWq_D6I4How.mft (raw, json)
Hash identifier:          BLxkNu4VER/JCmoAsD8lQTUj4/2i1GtBnoEoHeHS60s=
Subject key identifier:   9C:1A:4E:6A:75:A4:81:42:2E:59:80:D8:9F:1D:F9:4D:88:60:0E:AC
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Certificate issuer:       /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial:       0196A98BD471A0B4574E3ED66FC2586D8904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
Manifest number:          106F
Signing time:             Wed 07 May 2025 07:00:35 +0000
Manifest this update:     Wed 07 May 2025 07:00:35 +0000
Manifest next update:     Thu 08 May 2025 07:00:35 +0000
Files and hashes:         1: E_OtQPlu1efznY2eGWq_D6I4How.crl (hash: 9MAWg1QdEVW0gyvPXEJDkUGRLhwa+unKhLheOHXqVX0=)
                          2: z7S0Dz882RLcbziuzTp5d0_DNew.roa (hash: KUS+jL9qYhHGYv1E9XE/X3yjSFhxo3sbNNAyJ3Cg4aE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 07:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:8b:d4:71:a0:b4:57:4e:3e:d6:6f:c2:58:6d:89:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
        Validity
            Not Before: May  7 07:00:35 2025 GMT
            Not After : May  8 07:00:35 2025 GMT
        Subject: CN=9c1a4e6a75a481422e5980d89f1df94d88600eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:b5:88:25:7e:0c:fe:21:bb:f1:9f:81:8a:
                    3f:12:ea:81:32:d5:24:c9:40:77:41:b3:6b:4e:78:
                    1b:e3:9c:08:c2:7c:48:7c:bd:c6:76:78:a7:0d:af:
                    65:d6:7c:79:e7:08:82:fb:0a:e4:0e:c7:13:3a:59:
                    63:48:54:63:80:db:ab:d8:4b:61:4f:d1:5f:2d:cb:
                    5d:b6:7a:5a:4d:98:ad:e4:d6:e3:1f:34:c1:ff:4e:
                    8a:92:b7:bc:ec:c4:40:22:a6:5b:5f:3b:cd:90:1c:
                    a4:cb:f4:0d:b5:3f:5c:9e:b9:83:e8:ef:80:7b:65:
                    05:81:c8:05:bd:9f:23:30:cc:b9:37:5e:7d:2e:bc:
                    f2:d9:92:10:78:81:16:df:22:d4:73:74:8f:2f:7d:
                    29:51:24:4f:13:06:3c:b8:1c:f4:44:42:c3:a0:b5:
                    66:bd:57:92:fc:19:f3:bc:0b:a4:11:40:a9:06:86:
                    cf:76:ba:29:df:0d:dc:8e:31:1b:73:66:88:6e:16:
                    fa:e5:c4:37:5c:ed:af:70:45:32:c3:b1:69:a6:7b:
                    73:7e:dd:58:f7:06:2a:21:7c:b2:18:3d:41:1b:be:
                    91:7d:1b:aa:42:cd:c9:57:fe:96:5e:dc:3b:b2:d0:
                    59:61:62:82:f0:57:f4:79:41:15:65:34:47:50:3b:
                    02:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1A:4E:6A:75:A4:81:42:2E:59:80:D8:9F:1D:F9:4D:88:60:0E:AC
            X509v3 Authority Key Identifier:
                keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a7:c5:99:91:a0:70:1a:75:29:3e:4f:04:24:98:0a:ab:19:
         99:02:05:e1:83:56:59:34:78:18:5a:b1:74:51:a8:6c:7e:b3:
         72:69:25:bd:71:b8:83:03:85:ff:27:9b:38:00:e0:21:9c:85:
         b6:df:32:3a:58:f9:2f:ae:ba:d0:9d:80:e5:d7:70:96:06:41:
         15:af:e5:97:8a:c5:e6:06:21:a7:c8:6c:be:24:82:2e:b0:f5:
         4c:e2:95:8c:68:75:55:fa:6e:db:da:29:a7:14:68:8e:e0:17:
         d1:45:3a:41:0d:3d:b9:3f:7b:c6:40:d1:7f:99:86:19:eb:ff:
         85:12:a1:c3:c7:da:6d:e1:14:4d:93:54:7e:40:41:26:cc:69:
         32:e6:2c:a4:16:52:d4:7e:13:3e:95:7b:d8:53:ce:28:6b:ad:
         de:91:91:4a:ce:ef:2e:ed:71:7a:7e:e7:76:22:5d:ee:2b:bd:
         24:bb:88:e1:00:3a:95:5a:99:c5:fe:2f:f3:9a:9e:dd:c2:57:
         a9:9c:46:4e:57:ed:3f:77:4e:1d:23:f1:74:f9:aa:19:d1:9c:
         9c:20:b3:51:f1:5c:cf:ce:cf:b2:d6:99:a9:27:4b:a5:4e:73:
         e5:d1:c6:6b:f9:c4:c1:50:4b:e6:fc:c6:aa:41:e5:01:8a:ee:
         00:57:29:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapi9RxoLRXTj7Wb8JYbYkEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZjNhZDQwZjk2ZWQ1ZTdmMzlkOGQ5ZTE5NmFiZjBmYTIz
ODFlOGMwHhcNMjUwNTA3MDcwMDM1WhcNMjUwNTA4MDcwMDM1WjAzMTEwLwYDVQQD
Eyg5YzFhNGU2YTc1YTQ4MTQyMmU1OTgwZDg5ZjFkZjk0ZDg4NjAwZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi+1iCV+DP4hu/GfgYo/EuqBMtUk
yUB3QbNrTngb45wIwnxIfL3GdninDa9l1nx55wiC+wrkDscTOlljSFRjgNur2Eth
T9FfLctdtnpaTZit5NbjHzTB/06Kkre87MRAIqZbXzvNkByky/QNtT9cnrmD6O+A
e2UFgcgFvZ8jMMy5N159Lrzy2ZIQeIEW3yLUc3SPL30pUSRPEwY8uBz0RELDoLVm
vVeS/BnzvAukEUCpBobPdrop3w3cjjEbc2aIbhb65cQ3XO2vcEUyw7Fppntzft1Y
9wYqIXyyGD1BG76RfRuqQs3JV/6WXtw7stBZYWKC8Ff0eUEVZTRHUDsCjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwaTmp1pIFCLlmA2J8d+U2IYA6sMB8GA1UdIwQY
MBaAFBPzrUD5btXn852Nnhlqvw+iOB6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV9PdFFQbHUxZWZ6blkyZUdXcV9ENkk0SG93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzJlN2UtZjBmMC00ZmUwLWE2MzQt
ZjRmYmUwY2I5NDQ0LzEvRV9PdFFQbHUxZWZ6blkyZUdXcV9ENkk0SG93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83NzJlN2UtZjBmMC00ZmUwLWE2MzQtZjRmYmUwY2I5NDQ0
LzEvRV9PdFFQbHUxZWZ6blkyZUdXcV9ENkk0SG93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqfFmZGg
cBp1KT5PBCSYCqsZmQIF4YNWWTR4GFqxdFGobH6zcmklvXG4gwOF/yebOADgIZyF
tt8yOlj5L6660J2A5ddwlgZBFa/ll4rF5gYhp8hsviSCLrD1TOKVjGh1Vfpu29op
pxRojuAX0UU6QQ09uT97xkDRf5mGGev/hRKhw8fabeEUTZNUfkBBJsxpMuYspBZS
1H4TPpV72FPOKGut3pGRSs7vLu1xen7ndiJd7iu9JLuI4QA6lVqZxf4v85qe3cJX
qZxGTlftP3dOHSPxdPmqGdGcnCCzUfFcz87PstaZqSdLpU5z5dHGa/nEwVBL5vzG
qkHlAYruAFcpdA==
-----END CERTIFICATE-----
Generated at Wed May 7 09:58:33 2025 by rpki-client